Hello Michael,
I haven't tested that specific scenario. I would assume, however, that if they are able to access their official emails outside the office, then the Email Workflow Actions will inherit that access/privilege from the email platform - e.g. VPN etc.